@webiny/api-aco 0.0.0-ee-vpcs.549378cf03 → 0.0.0-unstable.06b2ede40f

package/utils/decorators/CmsEntriesCrudDecorators.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_constants","require","_ListEntriesFactory","_FilterEntriesByFolderFactory","_decorateIfModelAuthorizationEnabled","CmsEntriesCrudDecorators","constructor","context","decorate","folderLevelPermissions","aco","filterEntriesByFolder","FilterEntriesByFolderFactory","listEntriesHandler","ListEntriesFactory","decorateIfModelAuthorizationEnabled","cms","allParams","decoratee","model","initialParams","execute","params","entry","folderId","location","ROOT_FOLDER","permissions","getFolderLevelPermissions","ensureCanAccessFolderContent","rwd","ids","entries","options","wbyAco_location","id","input","storageOperations","getRevisionById","meta","getLatestRevisionByEntryId","targetFolderId","exports"],"sources":["CmsEntriesCrudDecorators.ts"],"sourcesContent":["import type { AcoContext } from \"~/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\nimport { ListEntriesFactory } from \"./ListEntriesFactory\";\nimport { FilterEntriesByFolderFactory } from \"./FilterEntriesByFolderFactory\";\nimport { decorateIfModelAuthorizationEnabled } from \"./decorateIfModelAuthorizationEnabled\";\n\ntype Context = Pick<AcoContext, \"aco\" | \"cms\">;\n\ninterface EntryManagerCrudDecoratorsParams {\n    context: Context;\n}\n\nexport class CmsEntriesCrudDecorators {\n    private readonly context: Context;\n\n    public constructor({ context }: EntryManagerCrudDecoratorsParams) {\n        this.context = context;\n    }\n\n    public decorate() {\n        const context = this.context;\n        const folderLevelPermissions = context.aco.folderLevelPermissions;\n\n        const filterEntriesByFolder = new FilterEntriesByFolderFactory(folderLevelPermissions);\n        const listEntriesHandler = new ListEntriesFactory(folderLevelPermissions);\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"listEntries\", async (...allParams) => {\n            const [decoratee, model, initialParams] = allParams;\n            return await listEntriesHandler.execute({ decoratee, model, initialParams });\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listLatestEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listPublishedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"listDeletedEntries\",\n            async (...allParams) => {\n                const [decoratee, model, initialParams] = allParams;\n                return await listEntriesHandler.execute({ decoratee, model, initialParams });\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntry\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"getEntryById\", async (...allParams) => {\n            const [decoratee, model, params] = allParams;\n            const entry = await decoratee(model, params);\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return entry;\n            }\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"r\"\n            });\n            return entry;\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getLatestEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"getPublishedEntriesByIds\",\n            async (...allParams) => {\n                const [decoratee, model, ids] = allParams;\n\n                const entries = await decoratee(model, ids);\n                return filterEntriesByFolder.execute(entries);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"createEntry\", async (...allParams) => {\n            const [decoratee, model, params, options] = allParams;\n            const folderId = params.wbyAco_location?.folderId || params.location?.folderId;\n\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, params, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, params, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"createEntryRevisionFrom\",\n            async (...allParams) => {\n                const [decoratee, model, id, input, options] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id, input, options);\n                }\n\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n\n                return decoratee(model, id, input, options);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"updateEntry\", async (...allParams) => {\n            const [decoratee, model, id, input, meta, options] = allParams;\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, input, meta, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"w\"\n            });\n\n            return decoratee(model, id, input, meta, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"deleteEntry\", async (...allParams) => {\n            const [decoratee, model, id, options] = allParams;\n\n            const entry = await context.cms.storageOperations.entries.getLatestRevisionByEntryId(\n                model,\n                {\n                    id\n                }\n            );\n\n            const folderId = entry?.location?.folderId;\n            if (!folderId || folderId === ROOT_FOLDER) {\n                return decoratee(model, id, options);\n            }\n\n            const permissions = await folderLevelPermissions.getFolderLevelPermissions(folderId);\n            await folderLevelPermissions.ensureCanAccessFolderContent({\n                permissions,\n                rwd: \"d\"\n            });\n\n            return decoratee(model, id, options);\n        });\n\n        decorateIfModelAuthorizationEnabled(\n            context.cms,\n            \"deleteEntryRevision\",\n            async (...allParams) => {\n                const [decoratee, model, id] = allParams;\n\n                const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                    id\n                });\n\n                const folderId = entry?.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return decoratee(model, id);\n                }\n\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"d\"\n                });\n\n                return decoratee(model, id);\n            }\n        );\n\n        decorateIfModelAuthorizationEnabled(context.cms, \"moveEntry\", async (...allParams) => {\n            const [decoratee, model, id, targetFolderId] = allParams;\n\n            /**\n             * First we need to check if user has access to the entries existing folder.\n             */\n            const entry = await context.cms.storageOperations.entries.getRevisionById(model, {\n                id\n            });\n\n            const folderId = entry?.location?.folderId || ROOT_FOLDER;\n            /**\n             * If the entry is in the same folder we are trying to move it to, just continue.\n             */\n            if (folderId === targetFolderId) {\n                return decoratee(model, id, targetFolderId);\n            } else if (folderId !== ROOT_FOLDER) {\n                /**\n                 * If entry current folder is not a root, check for access\n                 */\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n            /**\n             * If target folder is not a ROOT_FOLDER, check for access.\n             */\n            if (targetFolderId !== ROOT_FOLDER) {\n                const permissions = await folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                await folderLevelPermissions.ensureCanAccessFolderContent({\n                    permissions,\n                    rwd: \"w\"\n                });\n            }\n\n            return decoratee(model, id, targetFolderId);\n        });\n    }\n}\n"],"mappings":";;;;;;AACA,IAAAA,UAAA,GAAAC,OAAA;AACA,IAAAC,mBAAA,GAAAD,OAAA;AACA,IAAAE,6BAAA,GAAAF,OAAA;AACA,IAAAG,oCAAA,GAAAH,OAAA;AAQO,MAAMI,wBAAwB,CAAC;EAG3BC,WAAWA,CAAC;IAAEC;EAA0C,CAAC,EAAE;IAC9D,IAAI,CAACA,OAAO,GAAGA,OAAO;EAC1B;EAEOC,QAAQA,CAAA,EAAG;IACd,MAAMD,OAAO,GAAG,IAAI,CAACA,OAAO;IAC5B,MAAME,sBAAsB,GAAGF,OAAO,CAACG,GAAG,CAACD,sBAAsB;IAEjE,MAAME,qBAAqB,GAAG,IAAIC,0DAA4B,CAACH,sBAAsB,CAAC;IACtF,MAAMI,kBAAkB,GAAG,IAAIC,sCAAkB,CAACL,sBAAsB,CAAC;IAEzE,IAAAM,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CAAC,CAAC;IAEF,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,mBAAmB,EACnB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,sBAAsB,EACtB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,oBAAoB,EACpB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEC,aAAa,CAAC,GAAGH,SAAS;MACnD,OAAO,MAAMJ,kBAAkB,CAACQ,OAAO,CAAC;QAAEH,SAAS;QAAEC,KAAK;QAAEC;MAAc,CAAC,CAAC;IAChF,CACJ,CAAC;IAED,IAAAL,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,UAAU,EAAE,OAAO,GAAGC,SAAS,KAAK;MACjF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAR,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,cAAc,EAAE,OAAO,GAAGC,SAAS,KAAK;MACrF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,CAAC,GAAGL,SAAS;MAC5C,MAAMM,KAAK,GAAG,MAAML,SAAS,CAACC,KAAK,EAAEG,MAAM,CAAC;MAE5C,MAAME,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MACA,MAAMI,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACF,OAAOP,KAAK;IAChB,CAAC,CAAC;IAEF,IAAAR,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,uBAAuB,EACvB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEY,GAAG,CAAC,GAAGd,SAAS;MAEzC,MAAMe,OAAO,GAAG,MAAMd,SAAS,CAACC,KAAK,EAAEY,GAAG,CAAC;MAE3C,OAAOpB,qBAAqB,CAACU,OAAO,CAACW,OAAO,CAAC;IACjD,CACJ,CAAC;IAED,IAAAjB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,0BAA0B,EAC1B,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEY,GAAG,CAAC,GAAGd,SAAS;MAEzC,MAAMe,OAAO,GAAG,MAAMd,SAAS,CAACC,KAAK,EAAEY,GAAG,CAAC;MAC3C,OAAOpB,qBAAqB,CAACU,OAAO,CAACW,OAAO,CAAC;IACjD,CACJ,CAAC;IAED,IAAAjB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC,GAAGhB,SAAS;MACrD,MAAMO,QAAQ,GAAGF,MAAM,CAACY,eAAe,EAAEV,QAAQ,IAAIF,MAAM,CAACG,QAAQ,EAAED,QAAQ;MAE9E,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC;MAC5C;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEG,MAAM,EAAEW,OAAO,CAAC;IAC5C,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,yBAAyB,EACzB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC,GAAGhB,SAAS;MAExD,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;MAC/C;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;MACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEH,OAAO,CAAC;IAC/C,CACJ,CAAC;IAED,IAAAlB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC,GAAGhB,SAAS;MAC9D,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;MACrD;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEC,KAAK,EAAEG,IAAI,EAAEN,OAAO,CAAC;IACrD,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,aAAa,EAAE,OAAO,GAAGC,SAAS,KAAK;MACpF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC,GAAGhB,SAAS;MAEjD,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACQ,0BAA0B,CAChFrB,KAAK,EACL;QACIgB;MACJ,CACJ,CAAC;MAED,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC;MACxC;MAEA,MAAMN,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CAACJ,QAAQ,CAAC;MACpF,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEF,OAAO,CAAC;IACxC,CAAC,CAAC;IAEF,IAAAlB,wEAAmC,EAC/BR,OAAO,CAACS,GAAG,EACX,qBAAqB,EACrB,OAAO,GAAGC,SAAS,KAAK;MACpB,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,CAAC,GAAGlB,SAAS;MAExC,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ;MAC1C,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOR,SAAS,CAACC,KAAK,EAAEgB,EAAE,CAAC;MAC/B;MAEA,MAAMR,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;MACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;QACtDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MAEF,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,CAAC;IAC/B,CACJ,CAAC;IAED,IAAApB,wEAAmC,EAACR,OAAO,CAACS,GAAG,EAAE,WAAW,EAAE,OAAO,GAAGC,SAAS,KAAK;MAClF,MAAM,CAACC,SAAS,EAAEC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC,GAAGxB,SAAS;;MAExD;AACZ;AACA;MACY,MAAMM,KAAK,GAAG,MAAMhB,OAAO,CAACS,GAAG,CAACqB,iBAAiB,CAACL,OAAO,CAACM,eAAe,CAACnB,KAAK,EAAE;QAC7EgB;MACJ,CAAC,CAAC;MAEF,MAAMX,QAAQ,GAAGD,KAAK,EAAEE,QAAQ,EAAED,QAAQ,IAAIE,sBAAW;MACzD;AACZ;AACA;MACY,IAAIF,QAAQ,KAAKiB,cAAc,EAAE;QAC7B,OAAOvB,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC;MAC/C,CAAC,MAAM,IAAIjB,QAAQ,KAAKE,sBAAW,EAAE;QACjC;AAChB;AACA;QACgB,MAAMC,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;QACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MACA;AACZ;AACA;MACY,IAAIW,cAAc,KAAKf,sBAAW,EAAE;QAChC,MAAMC,WAAW,GAAG,MAAMlB,sBAAsB,CAACmB,yBAAyB,CACtEJ,QACJ,CAAC;QACD,MAAMf,sBAAsB,CAACoB,4BAA4B,CAAC;UACtDF,WAAW;UACXG,GAAG,EAAE;QACT,CAAC,CAAC;MACN;MAEA,OAAOZ,SAAS,CAACC,KAAK,EAAEgB,EAAE,EAAEM,cAAc,CAAC;IAC/C,CAAC,CAAC;EACN;AACJ;AAACC,OAAA,CAAArC,wBAAA,GAAAA,wBAAA","ignoreList":[]}

package/utils/decorators/FilterEntriesByFolderFactory.d.ts

@@ -0,0 +1,7 @@
+import type { FolderLevelPermissions } from "../../flp";
+import type { CmsEntry } from "@webiny/api-headless-cms/types";
+export declare class FilterEntriesByFolderFactory {
+    private readonly folderLevelPermissions;
+    constructor(folderLevelPermissions: FolderLevelPermissions);
+    execute(entries: CmsEntry[]): Promise<CmsEntry[]>;
+}

package/utils/decorators/FilterEntriesByFolderFactory.js

@@ -0,0 +1,30 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.FilterEntriesByFolderFactory = void 0;
+var _constants = require("../../constants");
+class FilterEntriesByFolderFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+  }
+  async execute(entries) {
+    const results = await Promise.all(entries.map(async entry => {
+      const folderId = entry.location?.folderId;
+      if (!folderId || folderId === _constants.ROOT_FOLDER) {
+        return entry;
+      }
+      const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+      const canAccessFolderContent = await this.folderLevelPermissions.canAccessFolderContent({
+        permissions,
+        rwd: "r"
+      });
+      return canAccessFolderContent ? entry : null;
+    }));
+    return results.filter(entry => !!entry);
+  }
+}
+exports.FilterEntriesByFolderFactory = FilterEntriesByFolderFactory;
+
+//# sourceMappingURL=FilterEntriesByFolderFactory.js.map

package/utils/decorators/FilterEntriesByFolderFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_constants","require","FilterEntriesByFolderFactory","constructor","folderLevelPermissions","execute","entries","results","Promise","all","map","entry","folderId","location","ROOT_FOLDER","permissions","getFolderLevelPermissions","canAccessFolderContent","rwd","filter","exports"],"sources":["FilterEntriesByFolderFactory.ts"],"sourcesContent":["import type { FolderLevelPermissions } from \"~/flp\";\nimport type { CmsEntry } from \"@webiny/api-headless-cms/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\n\nexport class FilterEntriesByFolderFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions) {\n        this.folderLevelPermissions = folderLevelPermissions;\n    }\n\n    public async execute(entries: CmsEntry[]): Promise<CmsEntry[]> {\n        const results = await Promise.all(\n            entries.map(async entry => {\n                const folderId = entry.location?.folderId;\n                if (!folderId || folderId === ROOT_FOLDER) {\n                    return entry;\n                }\n\n                const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(\n                    folderId\n                );\n                const canAccessFolderContent =\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    });\n                return canAccessFolderContent ? entry : null;\n            })\n        );\n\n        return results.filter((entry): entry is CmsEntry => !!entry);\n    }\n}\n"],"mappings":";;;;;;AAEA,IAAAA,UAAA,GAAAC,OAAA;AAEO,MAAMC,4BAA4B,CAAC;EAGtCC,WAAWA,CAACC,sBAA8C,EAAE;IACxD,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;EACxD;EAEA,MAAaC,OAAOA,CAACC,OAAmB,EAAuB;IAC3D,MAAMC,OAAO,GAAG,MAAMC,OAAO,CAACC,GAAG,CAC7BH,OAAO,CAACI,GAAG,CAAC,MAAMC,KAAK,IAAI;MACvB,MAAMC,QAAQ,GAAGD,KAAK,CAACE,QAAQ,EAAED,QAAQ;MACzC,IAAI,CAACA,QAAQ,IAAIA,QAAQ,KAAKE,sBAAW,EAAE;QACvC,OAAOH,KAAK;MAChB;MAEA,MAAMI,WAAW,GAAG,MAAM,IAAI,CAACX,sBAAsB,CAACY,yBAAyB,CAC3EJ,QACJ,CAAC;MACD,MAAMK,sBAAsB,GACxB,MAAM,IAAI,CAACb,sBAAsB,CAACa,sBAAsB,CAAC;QACrDF,WAAW;QACXG,GAAG,EAAE;MACT,CAAC,CAAC;MACN,OAAOD,sBAAsB,GAAGN,KAAK,GAAG,IAAI;IAChD,CAAC,CACL,CAAC;IAED,OAAOJ,OAAO,CAACY,MAAM,CAAER,KAAK,IAAwB,CAAC,CAACA,KAAK,CAAC;EAChE;AACJ;AAACS,OAAA,CAAAlB,4BAAA,GAAAA,4BAAA","ignoreList":[]}

package/utils/decorators/ListEntriesFactory.d.ts

@@ -0,0 +1,16 @@
+import type { FolderLevelPermissions } from "../../flp";
+import type { CmsEntry, CmsEntryListParams, CmsEntryMeta, CmsEntryValues } from "@webiny/api-headless-cms/types";
+import { type CmsModel } from "@webiny/api-headless-cms/types";
+interface ListEntriesFactoryCallbackParams {
+    decoratee: <T extends CmsEntryValues = CmsEntryValues>(model: CmsModel, params: CmsEntryListParams) => Promise<[CmsEntry<T>[], CmsEntryMeta]>;
+    model: CmsModel;
+    initialParams?: CmsEntryListParams;
+}
+export declare class ListEntriesFactory {
+    private readonly folderLevelPermissions;
+    private readonly permissionsCache;
+    constructor(folderLevelPermissions: FolderLevelPermissions);
+    execute({ decoratee, model, initialParams }: ListEntriesFactoryCallbackParams): Promise<[CmsEntry[], CmsEntryMeta]>;
+    private getPermissions;
+}
+export {};

package/utils/decorators/ListEntriesFactory.js

@@ -0,0 +1,107 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ListEntriesFactory = void 0;
+var _hasRootFolderId = require("./hasRootFolderId");
+class ListEntriesFactory {
+  constructor(folderLevelPermissions) {
+    this.folderLevelPermissions = folderLevelPermissions;
+    this.permissionsCache = new Map();
+  }
+  async execute({
+    decoratee,
+    model,
+    initialParams = {}
+  }) {
+    const limit = initialParams?.limit || 50;
+    const where = initialParams?.where;
+    const params = {
+      ...initialParams,
+      limit
+    };
+    const hasRootFolder = (0, _hasRootFolderId.hasRootFolderId)({
+      model,
+      where
+    });
+
+    // If we're querying the root folder, skip permission checks
+    if (hasRootFolder) {
+      return await decoratee(model, params);
+    }
+    const resultEntries = [];
+    let totalCount = 0;
+    let hasMoreItems = true;
+    let cursor = null;
+    let fetchedAll = false;
+    let afterCursor = params.after;
+
+    // Process entries in batches until we have enough results or reach the end
+    while (!fetchedAll) {
+      const queryParams = {
+        ...params,
+        after: afterCursor
+      };
+      const [entries, currentMeta] = await decoratee(model, queryParams);
+      if (totalCount === 0) {
+        totalCount = currentMeta.totalCount;
+      }
+
+      // Process each entry and check folder permissions
+      for (const entry of entries) {
+        const folderId = entry.values?.location?.folderId || entry.location?.folderId;
+
+        // If entry has no folderId, it's not using ACO folders system
+        // Include it in results as it's not subject to folder permissions
+        if (!folderId) {
+          resultEntries.push(entry);
+          continue;
+        }
+        const permissions = await this.getPermissions(folderId);
+
+        // If no FLP exists for the folder, the entry is accessible
+        // This means the folder doesn't have any permission restrictions
+        if (!permissions.length) {
+          resultEntries.push(entry);
+          continue;
+        }
+
+        // Check if user has read permission for the folder
+        if (await this.folderLevelPermissions.canAccessFolderContent({
+          permissions,
+          rwd: "r"
+        })) {
+          resultEntries.push(entry);
+        } else {
+          totalCount--;
+        }
+      }
+
+      // Determine if we need to fetch more entries
+      if (!currentMeta.hasMoreItems || resultEntries.length >= limit) {
+        fetchedAll = true;
+        hasMoreItems = currentMeta.hasMoreItems;
+        cursor = currentMeta.cursor;
+      } else {
+        afterCursor = currentMeta.cursor;
+      }
+    }
+    return [resultEntries, {
+      totalCount,
+      hasMoreItems,
+      cursor
+    }];
+  }
+  async getPermissions(folderId) {
+    if (this.permissionsCache.has(folderId)) {
+      return this.permissionsCache.get(folderId) ?? [];
+    }
+    const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);
+    this.permissionsCache.set(folderId, permissions);
+    return permissions;
+  }
+}
+exports.ListEntriesFactory = ListEntriesFactory;
+
+//# sourceMappingURL=ListEntriesFactory.js.map

package/utils/decorators/ListEntriesFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_hasRootFolderId","require","ListEntriesFactory","constructor","folderLevelPermissions","permissionsCache","Map","execute","decoratee","model","initialParams","limit","where","params","hasRootFolder","hasRootFolderId","resultEntries","totalCount","hasMoreItems","cursor","fetchedAll","afterCursor","after","queryParams","entries","currentMeta","entry","folderId","values","location","push","permissions","getPermissions","length","canAccessFolderContent","rwd","has","get","getFolderLevelPermissions","set","exports"],"sources":["ListEntriesFactory.ts"],"sourcesContent":["import type { FolderLevelPermissions } from \"~/flp\";\nimport type {\n    CmsEntry,\n    CmsEntryListParams,\n    CmsEntryMeta,\n    CmsEntryValues\n} from \"@webiny/api-headless-cms/types\";\nimport { type CmsModel } from \"@webiny/api-headless-cms/types\";\nimport { hasRootFolderId } from \"~/utils/decorators/hasRootFolderId\";\nimport type { FolderPermission } from \"~/flp/flp.types\";\n\ninterface ListEntriesFactoryCallbackParams {\n    decoratee: <T extends CmsEntryValues = CmsEntryValues>(\n        model: CmsModel,\n        params: CmsEntryListParams\n    ) => Promise<[CmsEntry<T>[], CmsEntryMeta]>;\n    model: CmsModel;\n    initialParams?: CmsEntryListParams;\n}\n\nexport class ListEntriesFactory {\n    private readonly folderLevelPermissions: FolderLevelPermissions;\n    private readonly permissionsCache: Map<string, FolderPermission[]>;\n\n    constructor(folderLevelPermissions: FolderLevelPermissions) {\n        this.folderLevelPermissions = folderLevelPermissions;\n        this.permissionsCache = new Map();\n    }\n\n    public async execute({\n        decoratee,\n        model,\n        initialParams = {}\n    }: ListEntriesFactoryCallbackParams): Promise<[CmsEntry[], CmsEntryMeta]> {\n        const limit = initialParams?.limit || 50;\n        const where = initialParams?.where;\n        const params = { ...initialParams, limit };\n        const hasRootFolder = hasRootFolderId({ model, where });\n\n        // If we're querying the root folder, skip permission checks\n        if (hasRootFolder) {\n            return await decoratee(model, params);\n        }\n\n        const resultEntries: CmsEntry[] = [];\n        let totalCount = 0;\n        let hasMoreItems = true;\n        let cursor: string | null = null;\n        let fetchedAll = false;\n        let afterCursor = params.after;\n\n        // Process entries in batches until we have enough results or reach the end\n        while (!fetchedAll) {\n            const queryParams: CmsEntryListParams = { ...params, after: afterCursor };\n            const [entries, currentMeta] = await decoratee(model, queryParams);\n\n            if (totalCount === 0) {\n                totalCount = currentMeta.totalCount;\n            }\n\n            // Process each entry and check folder permissions\n            for (const entry of entries) {\n                const folderId = entry.values?.location?.folderId || entry.location?.folderId;\n\n                // If entry has no folderId, it's not using ACO folders system\n                // Include it in results as it's not subject to folder permissions\n                if (!folderId) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                const permissions = await this.getPermissions(folderId);\n\n                // If no FLP exists for the folder, the entry is accessible\n                // This means the folder doesn't have any permission restrictions\n                if (!permissions.length) {\n                    resultEntries.push(entry);\n                    continue;\n                }\n\n                // Check if user has read permission for the folder\n                if (\n                    await this.folderLevelPermissions.canAccessFolderContent({\n                        permissions,\n                        rwd: \"r\"\n                    })\n                ) {\n                    resultEntries.push(entry);\n                } else {\n                    totalCount--;\n                }\n            }\n\n            // Determine if we need to fetch more entries\n            if (!currentMeta.hasMoreItems || resultEntries.length >= limit) {\n                fetchedAll = true;\n                hasMoreItems = currentMeta.hasMoreItems;\n                cursor = currentMeta.cursor;\n            } else {\n                afterCursor = currentMeta.cursor;\n            }\n        }\n\n        return [resultEntries, { totalCount, hasMoreItems, cursor } as CmsEntryMeta];\n    }\n\n    private async getPermissions(folderId: string): Promise<FolderPermission[]> {\n        if (this.permissionsCache.has(folderId)) {\n            return this.permissionsCache.get(folderId) ?? [];\n        }\n\n        const permissions = await this.folderLevelPermissions.getFolderLevelPermissions(folderId);\n        this.permissionsCache.set(folderId, permissions);\n        return permissions;\n    }\n}\n"],"mappings":";;;;;;AAQA,IAAAA,gBAAA,GAAAC,OAAA;AAYO,MAAMC,kBAAkB,CAAC;EAI5BC,WAAWA,CAACC,sBAA8C,EAAE;IACxD,IAAI,CAACA,sBAAsB,GAAGA,sBAAsB;IACpD,IAAI,CAACC,gBAAgB,GAAG,IAAIC,GAAG,CAAC,CAAC;EACrC;EAEA,MAAaC,OAAOA,CAAC;IACjBC,SAAS;IACTC,KAAK;IACLC,aAAa,GAAG,CAAC;EACa,CAAC,EAAuC;IACtE,MAAMC,KAAK,GAAGD,aAAa,EAAEC,KAAK,IAAI,EAAE;IACxC,MAAMC,KAAK,GAAGF,aAAa,EAAEE,KAAK;IAClC,MAAMC,MAAM,GAAG;MAAE,GAAGH,aAAa;MAAEC;IAAM,CAAC;IAC1C,MAAMG,aAAa,GAAG,IAAAC,gCAAe,EAAC;MAAEN,KAAK;MAAEG;IAAM,CAAC,CAAC;;IAEvD;IACA,IAAIE,aAAa,EAAE;MACf,OAAO,MAAMN,SAAS,CAACC,KAAK,EAAEI,MAAM,CAAC;IACzC;IAEA,MAAMG,aAAyB,GAAG,EAAE;IACpC,IAAIC,UAAU,GAAG,CAAC;IAClB,IAAIC,YAAY,GAAG,IAAI;IACvB,IAAIC,MAAqB,GAAG,IAAI;IAChC,IAAIC,UAAU,GAAG,KAAK;IACtB,IAAIC,WAAW,GAAGR,MAAM,CAACS,KAAK;;IAE9B;IACA,OAAO,CAACF,UAAU,EAAE;MAChB,MAAMG,WAA+B,GAAG;QAAE,GAAGV,MAAM;QAAES,KAAK,EAAED;MAAY,CAAC;MACzE,MAAM,CAACG,OAAO,EAAEC,WAAW,CAAC,GAAG,MAAMjB,SAAS,CAACC,KAAK,EAAEc,WAAW,CAAC;MAElE,IAAIN,UAAU,KAAK,CAAC,EAAE;QAClBA,UAAU,GAAGQ,WAAW,CAACR,UAAU;MACvC;;MAEA;MACA,KAAK,MAAMS,KAAK,IAAIF,OAAO,EAAE;QACzB,MAAMG,QAAQ,GAAGD,KAAK,CAACE,MAAM,EAAEC,QAAQ,EAAEF,QAAQ,IAAID,KAAK,CAACG,QAAQ,EAAEF,QAAQ;;QAE7E;QACA;QACA,IAAI,CAACA,QAAQ,EAAE;UACXX,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;UACzB;QACJ;QAEA,MAAMK,WAAW,GAAG,MAAM,IAAI,CAACC,cAAc,CAACL,QAAQ,CAAC;;QAEvD;QACA;QACA,IAAI,CAACI,WAAW,CAACE,MAAM,EAAE;UACrBjB,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;UACzB;QACJ;;QAEA;QACA,IACI,MAAM,IAAI,CAACtB,sBAAsB,CAAC8B,sBAAsB,CAAC;UACrDH,WAAW;UACXI,GAAG,EAAE;QACT,CAAC,CAAC,EACJ;UACEnB,aAAa,CAACc,IAAI,CAACJ,KAAK,CAAC;QAC7B,CAAC,MAAM;UACHT,UAAU,EAAE;QAChB;MACJ;;MAEA;MACA,IAAI,CAACQ,WAAW,CAACP,YAAY,IAAIF,aAAa,CAACiB,MAAM,IAAItB,KAAK,EAAE;QAC5DS,UAAU,GAAG,IAAI;QACjBF,YAAY,GAAGO,WAAW,CAACP,YAAY;QACvCC,MAAM,GAAGM,WAAW,CAACN,MAAM;MAC/B,CAAC,MAAM;QACHE,WAAW,GAAGI,WAAW,CAACN,MAAM;MACpC;IACJ;IAEA,OAAO,CAACH,aAAa,EAAE;MAAEC,UAAU;MAAEC,YAAY;MAAEC;IAAO,CAAC,CAAiB;EAChF;EAEA,MAAca,cAAcA,CAACL,QAAgB,EAA+B;IACxE,IAAI,IAAI,CAACtB,gBAAgB,CAAC+B,GAAG,CAACT,QAAQ,CAAC,EAAE;MACrC,OAAO,IAAI,CAACtB,gBAAgB,CAACgC,GAAG,CAACV,QAAQ,CAAC,IAAI,EAAE;IACpD;IAEA,MAAMI,WAAW,GAAG,MAAM,IAAI,CAAC3B,sBAAsB,CAACkC,yBAAyB,CAACX,QAAQ,CAAC;IACzF,IAAI,CAACtB,gBAAgB,CAACkC,GAAG,CAACZ,QAAQ,EAAEI,WAAW,CAAC;IAChD,OAAOA,WAAW;EACtB;AACJ;AAACS,OAAA,CAAAtC,kBAAA,GAAAA,kBAAA","ignoreList":[]}

package/utils/decorators/decorateIfModelAuthorizationEnabled.d.ts

@@ -0,0 +1,23 @@
+import type { CmsModel, HeadlessCms } from "@webiny/api-headless-cms/types";
+/**
+ * This type matches any function that has a CmsModel as the first parameter.
+ */
+type ModelCallable = (model: CmsModel, ...params: any[]) => any;
+/**
+ * This type filters only `ModelCallable` methods.
+ */
+type FilterModelMethods<T> = {
+    [K in keyof T as ModelCallable extends T[K] ? K : never]: T[K];
+};
+/**
+ * This type omits methods that have a more complex `model` type.
+ * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.
+ * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.
+ */
+type ModelMethods<T> = Omit<FilterModelMethods<T>, "getEntryManager" | "getSingletonEntryManager">;
+/**
+ * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.
+ */
+type Decorator<T extends ModelCallable> = (decoratee: T, ...args: Parameters<T>) => ReturnType<T>;
+export declare const decorateIfModelAuthorizationEnabled: <M extends "getEntry" | "getEntriesByIds" | "getEntryById" | "listEntries" | "listLatestEntries" | "listPublishedEntries" | "listDeletedEntries" | "getPublishedEntriesByIds" | "getLatestEntriesByIds" | "createEntry" | "createEntryRevisionFrom" | "updateEntry" | "validateEntry" | "moveEntry" | "republishEntry" | "deleteEntryRevision" | "deleteEntry" | "restoreEntryFromBin" | "deleteMultipleEntries" | "publishEntry" | "unpublishEntry" | "getEntryRevisions" | "getUniqueFieldValues", D extends Decorator<ModelMethods<HeadlessCms>[M]>>(root: ModelMethods<HeadlessCms>, method: M, decorator: D) => void;
+export {};

package/utils/decorators/decorateIfModelAuthorizationEnabled.js

@@ -0,0 +1,54 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.decorateIfModelAuthorizationEnabled = void 0;
+var _folder = require("../../folder/folder.model");
+/**
+ * This type matches any function that has a CmsModel as the first parameter.
+ */
+
+/**
+ * This type filters only `ModelCallable` methods.
+ */
+
+/**
+ * This type omits methods that have a more complex `model` type.
+ * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.
+ * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.
+ */
+
+/**
+ * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.
+ */
+
+const modelAuthorizationDisabled = model => {
+  if (typeof model.authorization === "object") {
+    return model?.authorization?.flp === false;
+  }
+  return model.authorization === false;
+};
+const isFolderModel = model => {
+  return model.modelId === _folder.FOLDER_MODEL_ID;
+};
+const decorateIfModelAuthorizationEnabled = (root, method, decorator) => {
+  /**
+   * We cast to `ModelCallable` because within the generic function, we only know that the first
+   * parameter is a `CmsModel`, and we forward the rest.
+   */
+  const decoratee = root[method].bind(root);
+  root[method] = (...params) => {
+    const [model, ...rest] = params;
+    if (isFolderModel(model)) {
+      return decoratee(model, ...rest);
+    }
+    if (modelAuthorizationDisabled(model)) {
+      return decoratee(model, ...rest);
+    }
+    return decorator(decoratee, ...params);
+  };
+};
+exports.decorateIfModelAuthorizationEnabled = decorateIfModelAuthorizationEnabled;
+
+//# sourceMappingURL=decorateIfModelAuthorizationEnabled.js.map

package/utils/decorators/decorateIfModelAuthorizationEnabled.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_folder","require","modelAuthorizationDisabled","model","authorization","flp","isFolderModel","modelId","FOLDER_MODEL_ID","decorateIfModelAuthorizationEnabled","root","method","decorator","decoratee","bind","params","rest","exports"],"sources":["decorateIfModelAuthorizationEnabled.ts"],"sourcesContent":["import type { CmsModel, HeadlessCms } from \"@webiny/api-headless-cms/types\";\nimport { FOLDER_MODEL_ID } from \"~/folder/folder.model\";\n\n/**\n * This type matches any function that has a CmsModel as the first parameter.\n */\ntype ModelCallable = (model: CmsModel, ...params: any[]) => any;\n\n/**\n * This type filters only `ModelCallable` methods.\n */\ntype FilterModelMethods<T> = {\n    [K in keyof T as ModelCallable extends T[K] ? K : never]: T[K];\n};\n\n/**\n * This type omits methods that have a more complex `model` type.\n * E.g., `getEntryManager` has `model` typed as `CmsModel | string`.\n * Ideally, we would filter those out in the previous utility type, but I'm not sure how to achieve that.\n */\ntype ModelMethods<T> = Omit<FilterModelMethods<T>, \"getEntryManager\" | \"getSingletonEntryManager\">;\n\n/**\n * Decorator takes the decoratee as the _first_ parameter, and then forwards the rest of the parameters.\n */\ntype Decorator<T extends ModelCallable> = (decoratee: T, ...args: Parameters<T>) => ReturnType<T>;\n\nconst modelAuthorizationDisabled = (model: CmsModel) => {\n    if (typeof model.authorization === \"object\") {\n        return model?.authorization?.flp === false;\n    }\n\n    return model.authorization === false;\n};\n\nconst isFolderModel = (model: CmsModel) => {\n    return model.modelId === FOLDER_MODEL_ID;\n};\n\nexport const decorateIfModelAuthorizationEnabled = <\n    /**\n     * This allows us to only have an auto-complete of `ModelCallable` methods.\n     */\n    M extends keyof ModelMethods<HeadlessCms>,\n    D extends Decorator<ModelMethods<HeadlessCms>[M]>\n>(\n    root: ModelMethods<HeadlessCms>,\n    method: M,\n    decorator: D\n) => {\n    /**\n     * We cast to `ModelCallable` because within the generic function, we only know that the first\n     * parameter is a `CmsModel`, and we forward the rest.\n     */\n    const decoratee = root[method].bind(root) as ModelCallable;\n    root[method] = ((...params: Parameters<ModelMethods<HeadlessCms>[M]>) => {\n        const [model, ...rest] = params;\n        if (isFolderModel(model)) {\n            return decoratee(model, ...rest);\n        }\n\n        if (modelAuthorizationDisabled(model)) {\n            return decoratee(model, ...rest);\n        }\n\n        return decorator(decoratee, ...params);\n    }) as ModelCallable;\n};\n"],"mappings":";;;;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AAEA;AACA;AACA;;AAGA;AACA;AACA;;AAKA;AACA;AACA;AACA;AACA;;AAGA;AACA;AACA;;AAGA,MAAMC,0BAA0B,GAAIC,KAAe,IAAK;EACpD,IAAI,OAAOA,KAAK,CAACC,aAAa,KAAK,QAAQ,EAAE;IACzC,OAAOD,KAAK,EAAEC,aAAa,EAAEC,GAAG,KAAK,KAAK;EAC9C;EAEA,OAAOF,KAAK,CAACC,aAAa,KAAK,KAAK;AACxC,CAAC;AAED,MAAME,aAAa,GAAIH,KAAe,IAAK;EACvC,OAAOA,KAAK,CAACI,OAAO,KAAKC,uBAAe;AAC5C,CAAC;AAEM,MAAMC,mCAAmC,GAAGA,CAO/CC,IAA+B,EAC/BC,MAAS,EACTC,SAAY,KACX;EACD;AACJ;AACA;AACA;EACI,MAAMC,SAAS,GAAGH,IAAI,CAACC,MAAM,CAAC,CAACG,IAAI,CAACJ,IAAI,CAAkB;EAC1DA,IAAI,CAACC,MAAM,CAAC,GAAI,CAAC,GAAGI,MAAgD,KAAK;IACrE,MAAM,CAACZ,KAAK,EAAE,GAAGa,IAAI,CAAC,GAAGD,MAAM;IAC/B,IAAIT,aAAa,CAACH,KAAK,CAAC,EAAE;MACtB,OAAOU,SAAS,CAACV,KAAK,EAAE,GAAGa,IAAI,CAAC;IACpC;IAEA,IAAId,0BAA0B,CAACC,KAAK,CAAC,EAAE;MACnC,OAAOU,SAAS,CAACV,KAAK,EAAE,GAAGa,IAAI,CAAC;IACpC;IAEA,OAAOJ,SAAS,CAACC,SAAS,EAAE,GAAGE,MAAM,CAAC;EAC1C,CAAmB;AACvB,CAAC;AAACE,OAAA,CAAAR,mCAAA,GAAAA,mCAAA","ignoreList":[]}

package/utils/decorators/hasRootFolderId.d.ts

@@ -0,0 +1,7 @@
+import type { CmsEntryListWhere, CmsModel } from "@webiny/api-headless-cms/types";
+interface Params {
+    model: CmsModel;
+    where: CmsEntryListWhere | undefined;
+}
+export declare const hasRootFolderId: ({ model, where }: Params) => boolean;
+export {};

package/utils/decorators/hasRootFolderId.js

@@ -0,0 +1,27 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.hasRootFolderId = void 0;
+var _isPlainObject = _interopRequireDefault(require("lodash/isPlainObject"));
+var _isPageModel = require("./isPageModel");
+var _constants = require("../../constants");
+const hasRootFolderId = ({
+  model,
+  where
+}) => {
+  if (!where) {
+    return false;
+  }
+  const key = (0, _isPageModel.isPageModel)(model) ? "location" : "wbyAco_location";
+  const location = where[key];
+  if (typeof location === "object" && location !== null && (0, _isPlainObject.default)(location)) {
+    return location.folderId === _constants.ROOT_FOLDER;
+  }
+  return false;
+};
+exports.hasRootFolderId = hasRootFolderId;
+
+//# sourceMappingURL=hasRootFolderId.js.map

package/utils/decorators/hasRootFolderId.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_isPlainObject","_interopRequireDefault","require","_isPageModel","_constants","hasRootFolderId","model","where","key","isPageModel","location","isPlainObject","folderId","ROOT_FOLDER","exports"],"sources":["hasRootFolderId.ts"],"sourcesContent":["import isPlainObject from \"lodash/isPlainObject\";\nimport { isPageModel } from \"~/utils/decorators/isPageModel\";\nimport type { CmsEntryListWhere, CmsModel } from \"@webiny/api-headless-cms/types\";\nimport { ROOT_FOLDER } from \"~/constants\";\n\ninterface Params {\n    model: CmsModel;\n    where: CmsEntryListWhere | undefined;\n}\n\nexport const hasRootFolderId = ({ model, where }: Params): boolean => {\n    if (!where) {\n        return false;\n    }\n\n    const key = isPageModel(model) ? \"location\" : \"wbyAco_location\";\n    const location = where[key];\n\n    if (typeof location === \"object\" && location !== null && isPlainObject(location)) {\n        return (location as Record<string, any>).folderId === ROOT_FOLDER;\n    }\n\n    return false;\n};\n"],"mappings":";;;;;;;AAAA,IAAAA,cAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AAEA,IAAAE,UAAA,GAAAF,OAAA;AAOO,MAAMG,eAAe,GAAGA,CAAC;EAAEC,KAAK;EAAEC;AAAc,CAAC,KAAc;EAClE,IAAI,CAACA,KAAK,EAAE;IACR,OAAO,KAAK;EAChB;EAEA,MAAMC,GAAG,GAAG,IAAAC,wBAAW,EAACH,KAAK,CAAC,GAAG,UAAU,GAAG,iBAAiB;EAC/D,MAAMI,QAAQ,GAAGH,KAAK,CAACC,GAAG,CAAC;EAE3B,IAAI,OAAOE,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,IAAI,IAAI,IAAAC,sBAAa,EAACD,QAAQ,CAAC,EAAE;IAC9E,OAAQA,QAAQ,CAAyBE,QAAQ,KAAKC,sBAAW;EACrE;EAEA,OAAO,KAAK;AAChB,CAAC;AAACC,OAAA,CAAAT,eAAA,GAAAA,eAAA","ignoreList":[]}

package/utils/decorators/isPageModel.d.ts

@@ -0,0 +1,5 @@
+import type { CmsModel } from "@webiny/api-headless-cms/types";
+/**
+ * Keep this until we figure out how to fetch the folders.
+ */
+export declare const isPageModel: (model: CmsModel) => boolean;

package/utils/decorators/isPageModel.js

@@ -0,0 +1,20 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.isPageModel = void 0;
+/**
+ * Keep this until we figure out how to fetch the folders.
+ */
+const isPageModel = model => {
+  if (model.modelId === "pbPage") {
+    return true;
+  } else if (model.modelId === "acoSearchRecord-pbpage") {
+    return true;
+  }
+  return false;
+};
+exports.isPageModel = isPageModel;
+
+//# sourceMappingURL=isPageModel.js.map

package/utils/decorators/isPageModel.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["isPageModel","model","modelId","exports"],"sources":["isPageModel.ts"],"sourcesContent":["import type { CmsModel } from \"@webiny/api-headless-cms/types\";\n\n/**\n * Keep this until we figure out how to fetch the folders.\n */\nexport const isPageModel = (model: CmsModel): boolean => {\n    if (model.modelId === \"pbPage\") {\n        return true;\n    } else if (model.modelId === \"acoSearchRecord-pbpage\") {\n        return true;\n    }\n    return false;\n};\n"],"mappings":";;;;;;AAEA;AACA;AACA;AACO,MAAMA,WAAW,GAAIC,KAAe,IAAc;EACrD,IAAIA,KAAK,CAACC,OAAO,KAAK,QAAQ,EAAE;IAC5B,OAAO,IAAI;EACf,CAAC,MAAM,IAAID,KAAK,CAACC,OAAO,KAAK,wBAAwB,EAAE;IACnD,OAAO,IAAI;EACf;EACA,OAAO,KAAK;AAChB,CAAC;AAACC,OAAA,CAAAH,WAAA,GAAAA,WAAA","ignoreList":[]}

package/utils/ensureAuthentication.d.ts

@@ -0,0 +1,2 @@
+import type { AcoContext } from "../types";
+export declare const ensureAuthentication: (context: AcoContext) => void;

package/utils/ensureAuthentication.js

@@ -0,0 +1,16 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ensureAuthentication = void 0;
+var _apiSecurity = require("@webiny/api-security");
+const ensureAuthentication = context => {
+  const identity = context.security.getIdentity();
+  if (!identity) {
+    throw new _apiSecurity.NotAuthorizedError();
+  }
+};
+exports.ensureAuthentication = ensureAuthentication;
+
+//# sourceMappingURL=ensureAuthentication.js.map

package/utils/ensureAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_apiSecurity","require","ensureAuthentication","context","identity","security","getIdentity","NotAuthorizedError","exports"],"sources":["ensureAuthentication.ts"],"sourcesContent":["import { NotAuthorizedError } from \"@webiny/api-security\";\nimport type { AcoContext } from \"~/types\";\n\nexport const ensureAuthentication = (context: AcoContext) => {\n    const identity = context.security.getIdentity();\n    if (!identity) {\n        throw new NotAuthorizedError();\n    }\n};\n"],"mappings":";;;;;;AAAA,IAAAA,YAAA,GAAAC,OAAA;AAGO,MAAMC,oBAAoB,GAAIC,OAAmB,IAAK;EACzD,MAAMC,QAAQ,GAAGD,OAAO,CAACE,QAAQ,CAACC,WAAW,CAAC,CAAC;EAC/C,IAAI,CAACF,QAAQ,EAAE;IACX,MAAM,IAAIG,+BAAkB,CAAC,CAAC;EAClC;AACJ,CAAC;AAACC,OAAA,CAAAN,oBAAA,GAAAA,oBAAA","ignoreList":[]}

package/utils/modelFactory.d.ts

@@ -0,0 +1,13 @@
+import type { CmsModelPlugin, CmsPrivateModelFull } from "@webiny/api-headless-cms";
+interface Params {
+    /**
+     * Locale and tenant do not need to be defined.
+     * In that case model is not bound to any locale or tenant.
+     * You can bind it to locale, tenant, both or none.
+     */
+    locale?: string;
+    tenant?: string;
+    modelDefinition: CmsPrivateModelFull;
+}
+export declare const modelFactory: (params: Params) => CmsModelPlugin;
+export {};

package/utils/modelFactory.js

@@ -0,0 +1,22 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.modelFactory = void 0;
+var _apiHeadlessCms = require("@webiny/api-headless-cms");
+const modelFactory = params => {
+  const {
+    locale,
+    tenant,
+    modelDefinition
+  } = params;
+  return (0, _apiHeadlessCms.createCmsModel)({
+    locale,
+    tenant,
+    ...modelDefinition
+  });
+};
+exports.modelFactory = modelFactory;
+
+//# sourceMappingURL=modelFactory.js.map

package/utils/modelFactory.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_apiHeadlessCms","require","modelFactory","params","locale","tenant","modelDefinition","createCmsModel","exports"],"sources":["modelFactory.ts"],"sourcesContent":["import type { CmsModelPlugin, CmsPrivateModelFull } from \"@webiny/api-headless-cms\";\nimport { createCmsModel } from \"@webiny/api-headless-cms\";\n\ninterface Params {\n    /**\n     * Locale and tenant do not need to be defined.\n     * In that case model is not bound to any locale or tenant.\n     * You can bind it to locale, tenant, both or none.\n     */\n    locale?: string;\n    tenant?: string;\n    modelDefinition: CmsPrivateModelFull;\n}\n\nexport const modelFactory = (params: Params): CmsModelPlugin => {\n    const { locale, tenant, modelDefinition } = params;\n\n    return createCmsModel({\n        locale,\n        tenant,\n        ...modelDefinition\n    });\n};\n"],"mappings":";;;;;;AACA,IAAAA,eAAA,GAAAC,OAAA;AAaO,MAAMC,YAAY,GAAIC,MAAc,IAAqB;EAC5D,MAAM;IAAEC,MAAM;IAAEC,MAAM;IAAEC;EAAgB,CAAC,GAAGH,MAAM;EAElD,OAAO,IAAAI,8BAAc,EAAC;IAClBH,MAAM;IACNC,MAAM;IACN,GAAGC;EACP,CAAC,CAAC;AACN,CAAC;AAACE,OAAA,CAAAN,YAAA,GAAAA,YAAA","ignoreList":[]}

package/utils/pickEntryFieldValues.d.ts

@@ -0,0 +1,3 @@
+import type { CmsEntry } from "@webiny/api-headless-cms/types";
+export declare const baseFields: string[];
+export declare function pickEntryFieldValues<T>(entry: CmsEntry): T;

package/utils/pickEntryFieldValues.js

@@ -0,0 +1,30 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.baseFields = void 0;
+exports.pickEntryFieldValues = pickEntryFieldValues;
+const baseFields = exports.baseFields = [
+// Entry ID is mapped to "id" (we don't use revisions with ACO entities).
+"id", "tenant", "locale", "createdOn", "modifiedOn", "savedOn", "createdBy", "modifiedBy", "savedBy"];
+const pickBaseEntryFieldValues = entry => {
+  const pickedValues = {};
+  for (const fieldName of baseFields) {
+    const [srcFieldName, targetFieldName = srcFieldName] = fieldName.split(":");
+    if (srcFieldName in entry) {
+      Object.assign(pickedValues, {
+        [targetFieldName]: entry[srcFieldName]
+      });
+    }
+  }
+  return pickedValues;
+};
+function pickEntryFieldValues(entry) {
+  return {
+    ...pickBaseEntryFieldValues(entry),
+    ...entry.values
+  };
+}
+
+//# sourceMappingURL=pickEntryFieldValues.js.map

package/utils/pickEntryFieldValues.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["baseFields","exports","pickBaseEntryFieldValues","entry","pickedValues","fieldName","srcFieldName","targetFieldName","split","Object","assign","pickEntryFieldValues","values"],"sources":["pickEntryFieldValues.ts"],"sourcesContent":["import type { CmsEntry } from \"@webiny/api-headless-cms/types\";\n\nexport const baseFields = [\n    // Entry ID is mapped to \"id\" (we don't use revisions with ACO entities).\n    \"id\",\n    \"tenant\",\n    \"locale\",\n    \"createdOn\",\n    \"modifiedOn\",\n    \"savedOn\",\n    \"createdBy\",\n    \"modifiedBy\",\n    \"savedBy\"\n];\n\nconst pickBaseEntryFieldValues = (entry: CmsEntry) => {\n    const pickedValues: Partial<CmsEntry> = {};\n    for (const fieldName of baseFields) {\n        const [srcFieldName, targetFieldName = srcFieldName] = fieldName.split(\":\");\n        if (srcFieldName in entry) {\n            Object.assign(pickedValues, {\n                [targetFieldName]: entry[srcFieldName as keyof CmsEntry]\n            });\n        }\n    }\n\n    return pickedValues;\n};\n\nexport function pickEntryFieldValues<T>(entry: CmsEntry): T {\n    return {\n        ...pickBaseEntryFieldValues(entry),\n        ...entry.values\n    } as T;\n}\n"],"mappings":";;;;;;;AAEO,MAAMA,UAAU,GAAAC,OAAA,CAAAD,UAAA,GAAG;AACtB;AACA,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,EACZ,SAAS,CACZ;AAED,MAAME,wBAAwB,GAAIC,KAAe,IAAK;EAClD,MAAMC,YAA+B,GAAG,CAAC,CAAC;EAC1C,KAAK,MAAMC,SAAS,IAAIL,UAAU,EAAE;IAChC,MAAM,CAACM,YAAY,EAAEC,eAAe,GAAGD,YAAY,CAAC,GAAGD,SAAS,CAACG,KAAK,CAAC,GAAG,CAAC;IAC3E,IAAIF,YAAY,IAAIH,KAAK,EAAE;MACvBM,MAAM,CAACC,MAAM,CAACN,YAAY,EAAE;QACxB,CAACG,eAAe,GAAGJ,KAAK,CAACG,YAAY;MACzC,CAAC,CAAC;IACN;EACJ;EAEA,OAAOF,YAAY;AACvB,CAAC;AAEM,SAASO,oBAAoBA,CAAIR,KAAe,EAAK;EACxD,OAAO;IACH,GAAGD,wBAAwB,CAACC,KAAK,CAAC;IAClC,GAAGA,KAAK,CAACS;EACb,CAAC;AACL","ignoreList":[]}

package/utils/resolve.d.ts

@@ -0,0 +1,3 @@
+import { ErrorResponse, ListResponse, Response } from "@webiny/handler-graphql";
+export declare const resolve: (fn: () => Promise<any>) => Promise<ErrorResponse | Response<any>>;
+export declare const resolveList: (fn: () => Promise<any>) => Promise<ErrorResponse | ListResponse<unknown, any>>;

package/utils/resolve.js

@@ -0,0 +1,26 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.resolveList = exports.resolve = void 0;
+var _handlerGraphql = require("@webiny/handler-graphql");
+const resolve = async fn => {
+  try {
+    return new _handlerGraphql.Response(await fn());
+  } catch (e) {
+    return new _handlerGraphql.ErrorResponse(e);
+  }
+};
+exports.resolve = resolve;
+const resolveList = async fn => {
+  try {
+    const [items, meta] = await fn();
+    return new _handlerGraphql.ListResponse(items, meta);
+  } catch (e) {
+    return new _handlerGraphql.ErrorResponse(e);
+  }
+};
+exports.resolveList = resolveList;
+
+//# sourceMappingURL=resolve.js.map

package/utils/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_handlerGraphql","require","resolve","fn","Response","e","ErrorResponse","exports","resolveList","items","meta","ListResponse"],"sources":["resolve.ts"],"sourcesContent":["import { ErrorResponse, ListResponse, Response } from \"@webiny/handler-graphql\";\n\nexport const resolve = async (fn: () => Promise<any>) => {\n    try {\n        return new Response(await fn());\n    } catch (e) {\n        return new ErrorResponse(e);\n    }\n};\nexport const resolveList = async (fn: () => Promise<any>) => {\n    try {\n        const [items, meta] = await fn();\n        return new ListResponse(items, meta);\n    } catch (e) {\n        return new ErrorResponse(e);\n    }\n};\n"],"mappings":";;;;;;AAAA,IAAAA,eAAA,GAAAC,OAAA;AAEO,MAAMC,OAAO,GAAG,MAAOC,EAAsB,IAAK;EACrD,IAAI;IACA,OAAO,IAAIC,wBAAQ,CAAC,MAAMD,EAAE,CAAC,CAAC,CAAC;EACnC,CAAC,CAAC,OAAOE,CAAC,EAAE;IACR,OAAO,IAAIC,6BAAa,CAACD,CAAC,CAAC;EAC/B;AACJ,CAAC;AAACE,OAAA,CAAAL,OAAA,GAAAA,OAAA;AACK,MAAMM,WAAW,GAAG,MAAOL,EAAsB,IAAK;EACzD,IAAI;IACA,MAAM,CAACM,KAAK,EAAEC,IAAI,CAAC,GAAG,MAAMP,EAAE,CAAC,CAAC;IAChC,OAAO,IAAIQ,4BAAY,CAACF,KAAK,EAAEC,IAAI,CAAC;EACxC,CAAC,CAAC,OAAOL,CAAC,EAAE;IACR,OAAO,IAAIC,6BAAa,CAACD,CAAC,CAAC;EAC/B;AACJ,CAAC;AAACE,OAAA,CAAAC,WAAA,GAAAA,WAAA","ignoreList":[]}

package/context/folders.d.ts

@@ -1,2 +0,0 @@
-import { FoldersConfig, IFolders } from "../types";
-export declare const createFoldersContext: ({ getTenantId, getLocaleCode, getIdentity, storageOperations }: FoldersConfig) => Promise<IFolders>;